Hi @rasulkireev,

I noticed that .env (and also the .git folder) make its way into the Docker image. Both could be a security risk, depending on threat model.

# docker compose run backend ls -l /app/.env
[..]
-rw-r--r-- 1 1000 1000 767 Feb  9 14:32 /app/.env

A solution could be a .dockerignore file.

Best, Sebastian